Contact list from Gmail appears to have been harvested

[MustISO]

A few of my contacts (so far) received emails that looked like they were from my GMail account but all the domains they actually came from were random. My account wasn't accessed from any devices according to Google's account history and not all contacts got spam.

I have almost no third party software on my PC (I do have anti-virus, Malwarebytes, Sandboxie, MS Office, Steam and Origin installed) no Flash, no JAVA, no Adobe Reader. My browsers are always updated the day the new one is released and I surf only inside Sandboxie.

Other than stealing a cookie or a my active session how could someone access my GMail contacts without Google showing any access?

 

[Mushkins]

>My account wasn't accessed from any devices according to Google's account history

It's more likely that your account was compromised than google somehow leaked everyone's contacts, or your address was harvested and spammers are spoofing their emails as you which just happened to go out to a few of your contacts who also had their addresses harvested.

That google account history thing is woefully inaccurate. It doesn't even show up when *I* access my email through another IP address most of the time.